Verified Source

2:461✓ Reproducible

Repositorykungfuflex/free-mint (private)

Commite33d5e8

Match100.0%

Files14

The exact source a sandboxed build reproduced the on-chain wasm from (bit-for-bit) – served from SUBFROST's verified-build database, since the origin repository is private.

Build & verification details

Reproduction recipestructural match

Every fixture below was reversed from the on-chain bytecode, then pinned in a sandboxed rebuild. Reproduced deterministically – the source genuinely compiles to this bytecode.

Toolchain

Build environment

HOME

/home/lee

← embedded registry/git-checkout paths

CARGO_HOME

/home/lee/.cargo

env

CC_wasm32_unknown_unknown=clang-14

Git dependency

repo

kungfuflex/alkanes-rs

rev

d787cdd

← fingerprint git_deps

source-id

bare (matches -C metadata → mono ordering)

README.md4,072 B

# free-mint
This alkane is adapted from earlier testing versions by the same name, but suitable for production usage. It enables semantics similar to what we are used to in runes ecosystem mints, but on the ALKANES metaprotocol. This template can be spawned using factory cellpacks and a data segment can be appended (such as a graphic), but other parameters can be supplied for an initial premine, a mint quantity per mint transaction, a cap, and a name/symbol, supplied with the initialization vector in the alkanes protocol message.

This contract implements a token with free mint capabilities using the alkane framework. It includes security features such as:

- Proper initialization guard via observe_initialization()

- Transaction hash validation to enforce one mint per transaction

- Comprehensive overflow protection

- Supply cap enforcement

- Standard token functionality (name, symbol, total supply)

- Free mint capabilities with configurable parameters

- Transaction-based mint limits

- Supply cap enforcement

- Comprehensive view functions

The contract follows the established storage pattern using StoragePointer::from_keyword for all persistent storage with the following keys:

- `/name` - Token name

- `/symbol` - Token symbol

- `/totalsupply` - Total supply tracking

- `/minted` - Total mints counter

- `/value-per-mint` - Value per mint configuration

- `/cap` - Maximum supply cap

- `/data` - Additional token data

- `/initialized` - Initialization guard

- `/tx-hashes` - Transaction hash tracking for mint limits

The contract implements all required opcodes:

- 0: Initialize(token_units, value_per_mint, cap, name, symbol)

- 88: SetNameAndSymbol(name, symbol)

- 99: GetName() -> String

- 100: GetSymbol() -> String

- 101: GetTotalSupply() -> u128

- 102: GetCap() -> u128

- 103: GetMinted() -> u128

- 104: GetValuePerMint() -> u128

- 1000: GetData() -> Vec<u8>

## Security Patterns

The contract implements several security patterns:

1. **Initialization Guard**: Prevents multiple initializations of the contract.

fn observe_initialization(&self) -> Result<()> {

let mut pointer = StoragePointer::from_keyword("/initialized");

if pointer.get().len() == 0 {

pointer.set_value::<u8>(0x01);

Err(anyhow!("already initialized"))

2. **Transaction Hash Validation**: Enforces one mint per transaction.

// Check if a transaction hash has been used for minting

pub fn has_tx_hash(&self, txid: &Txid) -> bool {

StoragePointer::from_keyword("/tx-hashes/")

.select(&txid.as_byte_array().to_vec())

.get_value::<u8>() == 1

// Add a transaction hash to the used set

pub fn add_tx_hash(&self, txid: &Txid) -> Result<()> {

StoragePointer::from_keyword("/tx-hashes/")

.select(&txid.as_byte_array().to_vec())

.set_value::<u8>(0x01);

3. **Overflow Protection**: Prevents integer overflow vulnerabilities.

fn increase_total_supply(&self, v: u128) -> Result<()> {

self.set_total_supply(overflow_error(self.total_supply().checked_add(v))

.map_err(|_| anyhow!("total supply overflow"))?);

4. **Cap Enforcement**: Prevents minting beyond the supply cap.

// Check if minting would exceed cap

if self.minted() >= self.cap() {

return Err(anyhow!("Supply cap reached: {} of {}", self.minted(), self.cap()));

To build the contract:

To build for WebAssembly:

cargo build --target wasm32-unknown-unknown --release

The project includes a comprehensive test suite that can be run with:

The tests use the `test-utils` feature of the alkanes-runtime crate to provide a mock environment for testing.

This project is licensed under the MIT License - see the LICENSE file for details.